Go/github.com/authzed/spicedb CVE-2025-65111: medium 5.3, EPSS 0.23%
SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb
Action: Upgrade github.com/authzed/spicedb to 1.47.1 or later.
go get github.com/authzed/spicedb@v1.47.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.47.1 | - |
Fixed versions
| 1.47.1 |
Sources
- osv: GO-2025-4151
- nvd: CVE-2025-65111
- https://github.com/authzed/spicedb/security/advisories/GHSA-9m7r-g8hg-x3vr
- https://github.com/authzed/spicedb/commit/8c2edbe1e7bd3851fa2138f4cc344bfde986dcf2
CVE-2025-65111 · published · modified · JSON